Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security IT

Consumers Data Stolen from LexisNexis 298

LE UI Guy writes "Reuters is currently running a story regarding LexisNexis being tapped into by identity thieves who accessed up to 32,000 customer profiles. Information hit included names, addresses, Social Security and driver's license numbers. This comes on the heels of rival ChoicePoint being breached for 145,000 profiles last month in a similar case. Better check yourself." Update: 03/10 02:40 GMT by J : ChoicePoint's name corrected (and, it may be more than 145,000, they don't know).
This discussion has been archived. No new comments can be posted.

Consumers Data Stolen from LexisNexis

Comments Filter:
  • by loggia ( 309962 ) on Wednesday March 09, 2005 @09:39PM (#11895742)
    With phishing, spyware, database theft... people picking thru your trash...

    How long before ANYONE'S identity has not been stolen?

    Seriously.

    Why not just put a fraud alert on everyone's credit reports and let's get it over with. You want to apply for credit? You'll have to jump through a few more hoops...

    The system as it is now is painfully broken.
  • by Anonymous Coward on Wednesday March 09, 2005 @09:41PM (#11895753)
    How long it will take someone to build a complete (may be 90%)databese of all americans thet will include SSN, DL#, Home address & Phone # etc. If this is the rate of privacy the thefts.

    How much it will be worth it and to whome it will worth it.
  • by CRepetski ( 824321 ) on Wednesday March 09, 2005 @09:44PM (#11895770)
    The Washington Post has another article about this:
    http://www.washingtonpost.com/wp-dyn/articles/A199 82-2005Mar9.html [washingtonpost.com]

    Most organizations have some sort of regulatory body. Does the data harvesting industry have this?

    Perhaps this should turn some heads in Congress now that we've got multiple cases of this insecurity. The question is, is Congress going to be able to do anything about it or will it be the same situation as with government computer security: Right now they just say "your security is bad" but that doesn't always fix the problem.

  • No...remember, copyright is only for the benefit of corporations too. You don't have the right to prevent the distribution of data that pertains to you, that right only extends to the latest pop song, that they've already chosen to release publicly, and then expect to tell said public what they may or may not do with it.

    But that brings up an interesting point...isn't someone currently getting sued by Apple for collecting data on them without their authorization and distributing it? Are only corporations allowed to protect sensitive data, and punish those who distribute it without authorization? If "trade secrets" exist, surely "personal secrets" do too?

  • by mithras the prophet ( 579978 ) on Wednesday March 09, 2005 @09:56PM (#11895825) Homepage Journal
    Did anybody else think -- what the hell is LexisNexis doing with peoples' Social Security numbers? But it turns out that this is a subsidiary that gathers up consumer data. So it's not that you have to key in your SSN before doing a Lexis search these days.

    Though I'm sure Ashcroft^H^H^H^H^H Gonzales would like that idea...
  • The solution: Opt In (Score:5, Interesting)

    by sulli ( 195030 ) * on Wednesday March 09, 2005 @10:01PM (#11895853) Journal
    Of course the bastards will do everything in their power to prevent it, but the answer is federal regulations requiring the explicit permission of the affected parties before any data on any individual is sold to anyone.

    I don't want a bunch of strangers reading my dossiers (and I have had exactly this - I was affected by the ChoicePoint scam). If I had to approve every offering or sale of my data, I would have easily been able to block said scam.

  • by jxyama ( 821091 ) on Wednesday March 09, 2005 @10:02PM (#11895862)
    why? i understand your sentiment, but it will do nothing in practical terms.

    microsoft employees use windows. need i say more?

  • Ephemeral data (Score:3, Interesting)

    by 1davo ( 692334 ) on Wednesday March 09, 2005 @10:03PM (#11895868) Journal
    Perhaps we need to keep our identity data offline.

    Our data should only live for the time it takes to make an online transaction; and not a femto-second longer.

    I want a "Mission Impossible" ID that self-destructs!

    How hard would this be to imple%$^? pfffttt __end_smoke_fx;

  • Legal comeback? (Score:2, Interesting)

    by danbond_98 ( 761308 ) on Wednesday March 09, 2005 @10:04PM (#11895874)
    What kind of comeback do people have if their data is misused as a result of this? I know in the UK the Data Protection Act would cover this kind of thing, but are there powers in the US to prosecute LexusNexus should their failure to protect your data cause you loss?
  • the facts (Score:1, Interesting)

    by Anonymous Coward on Wednesday March 09, 2005 @10:07PM (#11895893)
    Choice Point SOLD information to people that turned out to be ID thieves, Is this the same story with L/N ?

    The story only says ID thieves got a hold of data, it doesn't say how. (The use of ID Thieves naturaly leads you to asume they stole the data, BUT!)
  • by Doc Ruby ( 173196 ) on Wednesday March 09, 2005 @10:13PM (#11895925) Homepage Journal
    We might be entering a time when the only chance of protecting one's rights is to incorporate, and assign all assets (IP and real) to it. Incorporation might become the modern blessing once expected of christening.
  • by gregmac ( 629064 ) on Wednesday March 09, 2005 @10:40PM (#11896056) Homepage
    These corporations are destroying the value of our essential property: our identities. They demand we give our personal info, without enforcing our copyrights to prevent its being disseminated

    There's an idea (not sure if this is what you were implying): copyright your personal data. When you have to give info to someone, make them agree to a licence to use your info. "You are hereby granted a limited, non-exclusive right to this information. You may use this information internally within your company for the use of identifing and billing my account. you may not distribute this information to other parties or use it for any other purpose than stated above without my express written consent."

    Then if they abuse it, you can sue them for copyright infringement.

    Would this work?

  • by Who drank my chocola ( 866496 ) on Wednesday March 09, 2005 @10:56PM (#11896190) Homepage
    Recent events have forced me to examine and then re-examine my security arrangements. I'm the new admin for a small publishing concern and I'm playing catch up right now. Before I got hired, a lot of admin work was left undone. So I want to do a good job, and all this talk of data theft has me spooked...

    I've inherited a mess. A total mess. Employees with default passwords (that never expire,) vendors from years long gone by with active accounts, some used recently... (Yeah, I've already disabled them.) The list just goes on.

    My point is, when you read a story like this you feel bad for how screwed the admin(s) will be (especially if they have family) for a moment.

    And then you get to work and double-check that you're not next in line for a public de-pantsing.
  • by dbIII ( 701233 ) on Wednesday March 09, 2005 @11:14PM (#11896299)
    They should not be storing this information, it should only be for government use. Realisticly the implications are the same as the theives getting your credit card number, expiry date and PIN.

    In this Homeland paranoia age where everything that is in the database must be right, you certainly don't want to see government ID numbers getting used in fraud. How do you go about getting a new Social Security number when the existing one is being used in fraud?

  • by 2nd Post! ( 213333 ) <gundbear@pacbe l l .net> on Wednesday March 09, 2005 @11:21PM (#11896334) Homepage
    I don't think only corporations have the right.

    If you're information was leaked, I don't see why you couldn't sue Lexis/Choice/BofA.

    The problem is whether you are suing for:
    1) Damages
    2) Liability
    3) Criminal behavior

    Damages? That depends on how much got stolen from you
    Liability? I have no clue
    Criminal behavior? I suppose that falls under 'negligence' but I don't know how they award damages for this.
  • by Doc Ruby ( 173196 ) on Wednesday March 09, 2005 @11:51PM (#11896498) Homepage Journal
    How is one's corporate assets any less safe than one's personal assets in court? In fact, it's quite the other way around. And where is this "one corporation per human" rule? When taking risks, of course the assets will be shuffled to some more-protected corporation, giving the risk-taking corporation's limited liability more teeth. Just like any other corporation.
  • by gstoddart ( 321705 ) on Wednesday March 09, 2005 @11:55PM (#11896518) Homepage
    How is one's corporate assets any less safe than one's personal assets in court?

    Corporations may be bought and sold.

    Tommy Hilfiger no longer owns his name, it's a corporation.

    When, as the grandparent suggested, you get a corporation as your birthright, it sounds awfully eerie to me. *shrug* Maybe the foil hat is too snug.
  • by Doc Ruby ( 173196 ) on Thursday March 10, 2005 @12:12AM (#11896660) Homepage Journal
    One's personal assets may be bought and sold, too. They're just harder to devalue for tax purposes (among other tricks) than are corporate assets. And personal assets are more easily frozen than are corporate assets. I'd prefer a future in which humans have rights, and corporations have inferior rights. But that's very clearly the opposite of the actual trend. Coping might mean dignifying a disgusting values priority, but it's certainly feasible.
  • Re:the law is... (Score:1, Interesting)

    by Anonymous Coward on Thursday March 10, 2005 @10:22AM (#11898642)
    My checks have the statement "Personal information is not for resale." on them and I sincerely hope I soon get a letter from either one of these companies, as I'm going to sue the crap out of them and everyone in between that bartered my personal data.

An Ada exception is when a routine gets in trouble and says 'Beam me up, Scotty'.

Working...